Microsoft warns of TerminalFix attacks deploying reverse tunnels

BleepingComputer security news digest covering ClickFix/TerminalFix social engineering that abuses fake Cloudflare CAPTCHA prompts to execute PowerShell, Chinese Fire Ant compromise of Cisco routers using covert GRE tunnels, ransomware and data-theft incidents, infostealer theft of AI service sessions, malicious browser extensions, and other security and service-impacting events. The most immediately actionable threats are TerminalFix command execution, router persistence/tunneling, credential and session theft, and ransomware-related data exfiltration.